We need the requestor identifier to check whether the resource owner has given the requestor access to the resource.
HttpRequest.AccessToken. The
HttpRequest.AccessToken.subject attribute has the needed
information.-
Be prepared to use the
HttpRequest.AccessTokenattribute in a later step.